Ubiquiti UniFi Door Access Reader Lite 安全漏洞

The Ubiquiti UniFi Door Access Reader Lite Ubiquiti UA Lite is a modern NFC and Bluetooth reader from Ubiquiti USA. A security vulnerability exists in UniFi Door Access Reader Lite UA Lite firmware version 3.8.28.24 and earlier, which originates from a vulnerability that allows a malicious actor...

Modern Events Calendar Lite < 6.4.7 - Reflected Cross-Site Scripting

The plugin does not escape some generated URLs before outputting them back in attributes, leading to Reflected Cross-Site Scripting PoC On a page where the Total Booking widget is displayed, append the following payload: "...

WordPress plugin Modern Events Calendar Lite跨站脚本漏洞

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language. The platform supports personal blogging sites on PHP and MySQL servers. WordPress plugin is a WordPress open source application plugin. WordPress plugin Modern Events Calendar Lite 6.4.0 previously...

CVE-2022-0364

The Modern Events Calendar Lite WordPress plugin before 6.4.0 does not sanitize and escape some of the Hourly Schedule parameters which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks...

CVE-2022-0364

The Modern Events Calendar Lite WordPress plugin before 6.4.0 does not sanitize and escape some of the Hourly Schedule parameters which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks...

Backdoor.Win32.BNLite Buffer Overflow

Discovery / credits: Malvuln - malvuln.com c 2022 Original source: https://malvuln.com/advisory/0d1f873f6816debd244e1e77509f6ba7.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.BNLite Vulnerability: Remote Stack Buffer Overflow Description: BioNet Lite Server 4....

CVE-2022-23987

The WS Form LITE and Pro WordPress plugins before 1.8.176 do not sanitise and escape their Form Name, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...

CVE-2022-23988

The WS Form LITE and Pro WordPress plugins before 1.8.176 do not sanitise and escape submitted form data, allowing unauthenticated attacker to submit XSS payloads which will get executed when a privileged user will view the related submission...

WordPress Elegant Calendar Lite – WordPress Events Calendar Plugin plugin < 1.5.8 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Elegant Calendar Lite – WordPress Events Calendar Plugin plugin versions 1.5.8. Solution Update the WordPress Elegant Calendar Lite – WordPress Events Calendar Plugin plugin to the latest available version at least 1.5.8...

WordPress Social Gallery Lite plugin <= 3.1 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Social Gallery Lite plugin versions = 3.1. Solution No patched version available...

WordPress Ad Blocker Notify Lite plugin <= 2.4.0 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Ad Blocker Notify Lite plugin versions = 2.4.0. Solution No patched version available...

WordPress UltraAddons Elementor Lite plugin <= 1.1.0 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress UltraAddons Elementor Lite plugin versions = 1.1.0. Solution Update the WordPress UltraAddons Elementor Lite plugin to the latest available version at least 1.1.1...

WordPress Elegant Calendar Lite – WordPress Events Calendar Plugin plugin < 1.5.8 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Elegant Calendar Lite – WordPress Events Calendar Plugin plugin versions 1.5.8. Solution Update the WordPress Elegant Calendar Lite – WordPress Events Calendar Plugin plugin to the latest available...

WordPress Consultpress Lite theme <= 1.2.3 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Consultpress Lite theme versions = 1.2.3. Solution No patched version available...

WordPress Ultimate Divi Modules Suite – Divi Sumo Lite plugin <= 1.0.5 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Ultimate Divi Modules Suite – Divi Sumo Lite plugin versions = 1.0.5. Solution Update the WordPress Ultimate Divi Modules Suite – Divi Sumo Lite plugin to the latest available version at least 1.0.6...

WordPress Page Studio Lite Plugin plugin <= 1.0.6 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Page Studio Lite Plugin plugin versions = 1.0.6. Solution No patched version available...

WordPress Ad Blocker Notify Lite plugin <= 2.4.0 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Ad Blocker Notify Lite plugin versions = 2.4.0. Solution No patched version available...

WordPress Woocommerce Blocker Lite plugin <= 2.0.3 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Woocommerce Blocker Lite plugin versions = 2.0.3. Solution Update the WordPress Woocommerce Blocker Lite plugin to the latest available version at least 2.1.0...

WordPress Aquarella Lite theme <= 1.1 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Aquarella Lite theme versions = 1.1. Solution No patched version available...

WordPress Aquarella Lite theme <= 1.1 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Aquarella Lite theme versions = 1.1. Solution No patched version available...